Description

Implement and maintain security configurations across Azure services and Landing Zones. Support platform security components including Azure Firewall, NSGs, and Private Endpoints. Monitor and triage alerts from Defender for Cloud and Sentinel, escalating incidents as necessary. Assist in enforcing identity controls using Azure RBAC, PIM, MFA, and Conditional Access. Apply Azure Policy and monitor compliance against CIS Benchmarks and ISO 27001. Contribute to automation tasks using PowerShell and Terraform to improve security tooling and automated checks.

Responsibilities

• Implement security configurations for Azure Landing Zones and platform components.
• Monitor, triage, and escalate alerts from Microsoft Defender and Sentinel.
• Enforce identity and access controls via RBAC, PIM, and Conditional Access.
• Apply Azure Policy to ensure compliance with CIS and ISO 27001 standards.
• Automate security checks and tooling improvements using Terraform and PowerShell.

Required Skills

• 5+ years of experience in cloud security and Azure platform services.
• Working knowledge of Microsoft Defender for Cloud and Microsoft Sentinel.
• Familiarity with Terraform and PowerShell for infrastructure automation.
• Understanding of network security, including Azure Firewall and segmentation.
• Knowledge of identity management, RBAC, and Privileged Identity Management.
• Experience with compliance frameworks such as CIS Benchmarks and ISO 27001.

Preferred Skills

• Experience with Azure Landing Zone architecture.
• Strong analytical skills for security incident investigation.

Key Skills

Education

Any Graduate